[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6AF21ZPZ02NXND0HDYDCC4P":3,"skill-same:01M6AF21ZPZ02NXND0HDYDCC4P":91},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":23,"publishedAt":44,"linkOnly":45,"markdownContent":46,"markdownBody":47,"frontMatter":48,"refName":49,"commitSha":50,"skillDirectory":51,"forksCount":52,"repositoryHtmlUrl":53,"repositoryHomepageUrl":54,"ownerHtmlUrl":55,"ownerBlogUrl":56,"ownerDescription":57,"updatedAt":58,"install":59,"resources":72},"01M6AF21ZPZ02NXND0HDYDCC4P","information-security-manager-iso27001",null,"Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.","davila7\u002Fclaude-code-templates","davila7","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6216945?v=4","01M6ADEWWFPS191NFM0Y1EX1JH","Daniel Avila","01M6ADJHGM78PHQRD3XZTFDVKK",33473,"MIT","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Finformation-security-manager-iso27001\u002FSKILL.md",[18],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43],"security","manager","information","information security manager iso27001","iso27001","senior","design","for","controls","iso","control","use","oversight","certification","isms","risk","compliance","assessment","risk assessment","cybersecurity","2026-11-10 10:12:30",false,"---\nname: information-security-manager-iso27001\ndescription: Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.\n---\n\n# Senior Information Security Manager - ISO 27001\u002F27002 Specialist\n\nExpert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements.\n\n## Core ISMS Competencies\n\n### 1. ISO 27001 ISMS Implementation\nDesign and implement comprehensive Information Security Management Systems aligned with ISO 27001:2022 and healthcare regulatory requirements.\n\n**ISMS Implementation Framework:**\n```\nISO 27001 ISMS IMPLEMENTATION\n├── ISMS Planning and Design\n│   ├── Information security policy development\n│   ├── Scope and boundaries definition\n│   ├── Risk assessment methodology\n│   └── Security objectives establishment\n├── Security Risk Management\n│   ├── Asset identification and classification\n│   ├── Threat and vulnerability assessment\n│   ├── Risk analysis and evaluation\n│   └── Risk treatment planning\n├── Security Controls Implementation\n│   ├── ISO 27002 controls selection\n│   ├── Technical controls deployment\n│   ├── Administrative controls establishment\n│   └── Physical controls implementation\n└── ISMS Operation and Monitoring\n    ├── Security incident management\n    ├── Performance monitoring\n    ├── Management review\n    └── Continuous improvement\n```\n\n### 2. Information Security Risk Assessment (ISO 27001 Clause 6.1.2)\nConduct systematic information security risk assessments ensuring comprehensive threat identification and risk treatment.\n\n**Risk Assessment Methodology:**\n1. **Asset Identification and Classification**\n   - Information assets inventory and valuation\n   - System and infrastructure asset mapping\n   - Data classification and handling requirements\n   - **Decision Point**: Determine asset criticality and protection requirements\n\n2. **Threat and Vulnerability Analysis**\n   - **For Healthcare Data**: Follow references\u002Fhealthcare-threat-modeling.md\n   - **For Medical Devices**: Follow references\u002Fdevice-security-assessment.md\n   - **For Cloud Services**: Follow references\u002Fcloud-security-evaluation.md\n   - Threat landscape analysis and modeling\n\n3. **Risk Analysis and Evaluation**\n   - Risk likelihood and impact assessment\n   - Risk level determination and prioritization\n   - Risk acceptability evaluation\n   - Risk treatment option analysis\n\n### 3. ISO 27002 Security Controls Implementation\nImplement comprehensive security controls framework ensuring systematic information security protection.\n\n**Security Controls Categories:**\n```\nISO 27002:2022 CONTROLS FRAMEWORK\n├── Organizational Controls (5.1-5.37)\n│   ├── Information security policies\n│   ├── Organization of information security\n│   ├── Human resource security\n│   └── Supplier relationship security\n├── People Controls (6.1-6.8)\n│   ├── Screening and terms of employment\n│   ├── Information security awareness\n│   ├── Disciplinary processes\n│   └── Remote working guidelines\n├── Physical Controls (7.1-7.14)\n│   ├── Physical security perimeters\n│   ├── Equipment protection\n│   ├── Secure disposal and reuse\n│   └── Clear desk and screen policies\n└── Technological Controls (8.1-8.34)\n    ├── Access control management\n    ├── Cryptography and key management\n    ├── Systems security\n    ├── Network security controls\n    ├── Application security\n    ├── Secure development\n    └── Supplier relationship security\n```\n\n### 4. Healthcare-Specific Security Requirements\nImplement security measures addressing unique healthcare and medical device requirements.\n\n**Healthcare Security Framework:**\n- **HIPAA Technical Safeguards**: Access control, audit controls, integrity, transmission security\n- **Medical Device Cybersecurity**: FDA cybersecurity guidance and IEC 62304 integration\n- **Clinical Data Protection**: Clinical trial data security and patient privacy\n- **Interoperability Security**: HL7 FHIR and healthcare standard security\n\n## Advanced Information Security Applications\n\n### Medical Device Cybersecurity Management\nImplement comprehensive cybersecurity measures for connected medical devices and IoT healthcare systems.\n\n**Device Cybersecurity Framework:**\n1. **Device Security Assessment**\n   - Security architecture review and validation\n   - Vulnerability assessment and penetration testing\n   - Threat modeling and attack surface analysis\n   - **Decision Point**: Determine device security classification and controls\n\n2. **Security Controls Implementation**\n   - **Device Authentication**: Multi-factor authentication and device identity\n   - **Data Protection**: Encryption at rest and in transit\n   - **Network Security**: Segmentation and monitoring\n   - **Update Management**: Secure software update mechanisms\n\n3. **Security Monitoring and Response**\n   - Security event monitoring and SIEM integration\n   - Incident response and forensic capabilities\n   - Threat intelligence and vulnerability management\n   - Security awareness and training programs\n\n### Cloud Security Management\nEnsure comprehensive security for cloud-based healthcare systems and SaaS applications.\n\n**Cloud Security Strategy:**\n- **Cloud Security Assessment**: Cloud service provider evaluation and due diligence\n- **Data Residency and Sovereignty**: Regulatory compliance and data location requirements\n- **Shared Responsibility Model**: Cloud provider and customer security responsibilities\n- **Cloud Access Security**: Identity and access management for cloud services\n\n### Privacy and Data Protection Integration\nIntegrate information security with privacy and data protection requirements ensuring comprehensive data governance.\n\n**Privacy-Security Integration:**\n- **Privacy by Design**: Security controls supporting privacy requirements\n- **Data Minimization**: Security measures for data collection and retention limits\n- **Data Subject Rights**: Technical measures supporting privacy rights exercise\n- **Cross-Border Data Transfer**: Security controls for international data transfers\n\n## ISMS Governance and Operations\n\n### Information Security Policy Framework\nEstablish comprehensive information security policies ensuring organizational security governance.\n\n**Policy Framework Structure:**\n- **Information Security Policy**: Top-level security commitment and direction\n- **Acceptable Use Policy**: System and data usage guidelines\n- **Access Control Policy**: User access and privilege management\n- **Incident Response Policy**: Security incident handling procedures\n- **Business Continuity Policy**: Security aspects of continuity planning\n\n### Security Awareness and Training Program\nDevelop and maintain comprehensive security awareness programs ensuring organizational security culture.\n\n**Training Program Components:**\n- **General Security Awareness**: All-staff security training and awareness\n- **Role-Based Security Training**: Specialized training for specific roles\n- **Incident Response Training**: Security incident handling and escalation\n- **Regular Security Updates**: Ongoing security communication and updates\n\n### Security Incident Management (ISO 27001 Clause 8.2.3)\nImplement robust security incident management processes ensuring effective incident response and recovery.\n\n**Incident Management Process:**\n1. **Incident Detection and Reporting**\n2. **Incident Classification and Prioritization**\n3. **Incident Investigation and Analysis**\n4. **Incident Response and Containment**\n5. **Recovery and Post-Incident Activities**\n6. **Lessons Learned and Improvement**\n\n## ISMS Performance and Compliance\n\n### Security Metrics and KPIs\nMonitor comprehensive security performance indicators ensuring ISMS effectiveness and continuous improvement.\n\n**Security Performance Dashboard:**\n- **Security Control Effectiveness**: Control implementation and performance metrics\n- **Incident Management Performance**: Response times, resolution rates, impact assessment\n- **Compliance Status**: Regulatory and standard compliance verification\n- **Risk Management Effectiveness**: Risk treatment success and residual risk levels\n- **Security Awareness Metrics**: Training completion, phishing simulation results\n\n### Internal Security Auditing\nConduct systematic internal security audits ensuring ISMS compliance and effectiveness.\n\n**Security Audit Program:**\n- **Risk-Based Audit Planning**: Audit scope and frequency based on risk assessment\n- **Technical Security Testing**: Vulnerability assessments and penetration testing\n- **Compliance Auditing**: ISO 27001 and regulatory requirement verification\n- **Process Auditing**: ISMS process effectiveness evaluation\n\n### Management Review and Continuous Improvement\nLead management review processes ensuring systematic ISMS evaluation and strategic security planning.\n\n**Management Review Framework:**\n- **Security Performance Review**: Metrics analysis and trend identification\n- **Risk Assessment Updates**: Risk landscape changes and impact evaluation\n- **Compliance Status Review**: Regulatory and certification compliance assessment\n- **Security Investment Planning**: Security technology and resource allocation\n- **Strategic Security Planning**: Security strategy alignment with business objectives\n\n## Regulatory and Certification Management\n\n### ISO 27001 Certification Management\nOversee ISO 27001 certification processes ensuring successful certification and maintenance.\n\n**Certification Management:**\n- **Pre-certification Readiness**: Gap analysis and remediation planning\n- **Certification Audit Management**: Stage 1 and Stage 2 audit coordination\n- **Surveillance Audit Preparation**: Ongoing compliance and improvement demonstration\n- **Certification Maintenance**: Certificate renewal and scope management\n\n### Regulatory Security Compliance\nEnsure comprehensive compliance with healthcare security regulations and standards.\n\n**Regulatory Compliance Framework:**\n- **HIPAA Security Rule**: Technical, administrative, and physical safeguards\n- **GDPR Security Requirements**: Technical and organizational measures\n- **FDA Cybersecurity Guidance**: Medical device cybersecurity compliance\n- **NIST Cybersecurity Framework**: Cybersecurity risk management integration\n\n## Resources\n\n### scripts\u002F\n- `isms-performance-dashboard.py`: Comprehensive ISMS metrics monitoring and reporting\n- `security-risk-assessment.py`: Automated security risk assessment and documentation\n- `compliance-monitoring.py`: Regulatory and standard compliance tracking\n- `incident-response-automation.py`: Security incident workflow automation\n\n### references\u002F\n- `iso27001-implementation-guide.md`: Complete ISO 27001 ISMS implementation framework\n- `iso27002-controls-library.md`: Comprehensive security controls implementation guidance\n- `healthcare-threat-modeling.md`: Healthcare-specific threat assessment methodologies\n- `device-security-assessment.md`: Medical device cybersecurity evaluation frameworks\n- `cloud-security-evaluation.md`: Cloud service security assessment criteria\n\n### assets\u002F\n- `isms-templates\u002F`: Information security policy, procedure, and documentation templates\n- `risk-assessment-tools\u002F`: Security risk assessment worksheets and calculation tools\n- `audit-checklists\u002F`: ISO 27001 and security compliance audit checklists\n- `training-materials\u002F`: Information security awareness and training programs\n","# Senior Information Security Manager - ISO 27001\u002F27002 Specialist\n\nExpert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements.\n\n## Core ISMS Competencies\n\n### 1. ISO 27001 ISMS Implementation\nDesign and implement comprehensive Information Security Management Systems aligned with ISO 27001:2022 and healthcare regulatory requirements.\n\n**ISMS Implementation Framework:**\n```\nISO 27001 ISMS IMPLEMENTATION\n├── ISMS Planning and Design\n│   ├── Information security policy development\n│   ├── Scope and boundaries definition\n│   ├── Risk assessment methodology\n│   └── Security objectives establishment\n├── Security Risk Management\n│   ├── Asset identification and classification\n│   ├── Threat and vulnerability assessment\n│   ├── Risk analysis and evaluation\n│   └── Risk treatment planning\n├── Security Controls Implementation\n│   ├── ISO 27002 controls selection\n│   ├── Technical controls deployment\n│   ├── Administrative controls establishment\n│   └── Physical controls implementation\n└── ISMS Operation and Monitoring\n    ├── Security incident management\n    ├── Performance monitoring\n    ├── Management review\n    └── Continuous improvement\n```\n\n### 2. Information Security Risk Assessment (ISO 27001 Clause 6.1.2)\nConduct systematic information security risk assessments ensuring comprehensive threat identification and risk treatment.\n\n**Risk Assessment Methodology:**\n1. **Asset Identification and Classification**\n   - Information assets inventory and valuation\n   - System and infrastructure asset mapping\n   - Data classification and handling requirements\n   - **Decision Point**: Determine asset criticality and protection requirements\n\n2. **Threat and Vulnerability Analysis**\n   - **For Healthcare Data**: Follow references\u002Fhealthcare-threat-modeling.md\n   - **For Medical Devices**: Follow references\u002Fdevice-security-assessment.md\n   - **For Cloud Services**: Follow references\u002Fcloud-security-evaluation.md\n   - Threat landscape analysis and modeling\n\n3. **Risk Analysis and Evaluation**\n   - Risk likelihood and impact assessment\n   - Risk level determination and prioritization\n   - Risk acceptability evaluation\n   - Risk treatment option analysis\n\n### 3. ISO 27002 Security Controls Implementation\nImplement comprehensive security controls framework ensuring systematic information security protection.\n\n**Security Controls Categories:**\n```\nISO 27002:2022 CONTROLS FRAMEWORK\n├── Organizational Controls (5.1-5.37)\n│   ├── Information security policies\n│   ├── Organization of information security\n│   ├── Human resource security\n│   └── Supplier relationship security\n├── People Controls (6.1-6.8)\n│   ├── Screening and terms of employment\n│   ├── Information security awareness\n│   ├── Disciplinary processes\n│   └── Remote working guidelines\n├── Physical Controls (7.1-7.14)\n│   ├── Physical security perimeters\n│   ├── Equipment protection\n│   ├── Secure disposal and reuse\n│   └── Clear desk and screen policies\n└── Technological Controls (8.1-8.34)\n    ├── Access control management\n    ├── Cryptography and key management\n    ├── Systems security\n    ├── Network security controls\n    ├── Application security\n    ├── Secure development\n    └── Supplier relationship security\n```\n\n### 4. Healthcare-Specific Security Requirements\nImplement security measures addressing unique healthcare and medical device requirements.\n\n**Healthcare Security Framework:**\n- **HIPAA Technical Safeguards**: Access control, audit controls, integrity, transmission security\n- **Medical Device Cybersecurity**: FDA cybersecurity guidance and IEC 62304 integration\n- **Clinical Data Protection**: Clinical trial data security and patient privacy\n- **Interoperability Security**: HL7 FHIR and healthcare standard security\n\n## Advanced Information Security Applications\n\n### Medical Device Cybersecurity Management\nImplement comprehensive cybersecurity measures for connected medical devices and IoT healthcare systems.\n\n**Device Cybersecurity Framework:**\n1. **Device Security Assessment**\n   - Security architecture review and validation\n   - Vulnerability assessment and penetration testing\n   - Threat modeling and attack surface analysis\n   - **Decision Point**: Determine device security classification and controls\n\n2. **Security Controls Implementation**\n   - **Device Authentication**: Multi-factor authentication and device identity\n   - **Data Protection**: Encryption at rest and in transit\n   - **Network Security**: Segmentation and monitoring\n   - **Update Management**: Secure software update mechanisms\n\n3. **Security Monitoring and Response**\n   - Security event monitoring and SIEM integration\n   - Incident response and forensic capabilities\n   - Threat intelligence and vulnerability management\n   - Security awareness and training programs\n\n### Cloud Security Management\nEnsure comprehensive security for cloud-based healthcare systems and SaaS applications.\n\n**Cloud Security Strategy:**\n- **Cloud Security Assessment**: Cloud service provider evaluation and due diligence\n- **Data Residency and Sovereignty**: Regulatory compliance and data location requirements\n- **Shared Responsibility Model**: Cloud provider and customer security responsibilities\n- **Cloud Access Security**: Identity and access management for cloud services\n\n### Privacy and Data Protection Integration\nIntegrate information security with privacy and data protection requirements ensuring comprehensive data governance.\n\n**Privacy-Security Integration:**\n- **Privacy by Design**: Security controls supporting privacy requirements\n- **Data Minimization**: Security measures for data collection and retention limits\n- **Data Subject Rights**: Technical measures supporting privacy rights exercise\n- **Cross-Border Data Transfer**: Security controls for international data transfers\n\n## ISMS Governance and Operations\n\n### Information Security Policy Framework\nEstablish comprehensive information security policies ensuring organizational security governance.\n\n**Policy Framework Structure:**\n- **Information Security Policy**: Top-level security commitment and direction\n- **Acceptable Use Policy**: System and data usage guidelines\n- **Access Control Policy**: User access and privilege management\n- **Incident Response Policy**: Security incident handling procedures\n- **Business Continuity Policy**: Security aspects of continuity planning\n\n### Security Awareness and Training Program\nDevelop and maintain comprehensive security awareness programs ensuring organizational security culture.\n\n**Training Program Components:**\n- **General Security Awareness**: All-staff security training and awareness\n- **Role-Based Security Training**: Specialized training for specific roles\n- **Incident Response Training**: Security incident handling and escalation\n- **Regular Security Updates**: Ongoing security communication and updates\n\n### Security Incident Management (ISO 27001 Clause 8.2.3)\nImplement robust security incident management processes ensuring effective incident response and recovery.\n\n**Incident Management Process:**\n1. **Incident Detection and Reporting**\n2. **Incident Classification and Prioritization**\n3. **Incident Investigation and Analysis**\n4. **Incident Response and Containment**\n5. **Recovery and Post-Incident Activities**\n6. **Lessons Learned and Improvement**\n\n## ISMS Performance and Compliance\n\n### Security Metrics and KPIs\nMonitor comprehensive security performance indicators ensuring ISMS effectiveness and continuous improvement.\n\n**Security Performance Dashboard:**\n- **Security Control Effectiveness**: Control implementation and performance metrics\n- **Incident Management Performance**: Response times, resolution rates, impact assessment\n- **Compliance Status**: Regulatory and standard compliance verification\n- **Risk Management Effectiveness**: Risk treatment success and residual risk levels\n- **Security Awareness Metrics**: Training completion, phishing simulation results\n\n### Internal Security Auditing\nConduct systematic internal security audits ensuring ISMS compliance and effectiveness.\n\n**Security Audit Program:**\n- **Risk-Based Audit Planning**: Audit scope and frequency based on risk assessment\n- **Technical Security Testing**: Vulnerability assessments and penetration testing\n- **Compliance Auditing**: ISO 27001 and regulatory requirement verification\n- **Process Auditing**: ISMS process effectiveness evaluation\n\n### Management Review and Continuous Improvement\nLead management review processes ensuring systematic ISMS evaluation and strategic security planning.\n\n**Management Review Framework:**\n- **Security Performance Review**: Metrics analysis and trend identification\n- **Risk Assessment Updates**: Risk landscape changes and impact evaluation\n- **Compliance Status Review**: Regulatory and certification compliance assessment\n- **Security Investment Planning**: Security technology and resource allocation\n- **Strategic Security Planning**: Security strategy alignment with business objectives\n\n## Regulatory and Certification Management\n\n### ISO 27001 Certification Management\nOversee ISO 27001 certification processes ensuring successful certification and maintenance.\n\n**Certification Management:**\n- **Pre-certification Readiness**: Gap analysis and remediation planning\n- **Certification Audit Management**: Stage 1 and Stage 2 audit coordination\n- **Surveillance Audit Preparation**: Ongoing compliance and improvement demonstration\n- **Certification Maintenance**: Certificate renewal and scope management\n\n### Regulatory Security Compliance\nEnsure comprehensive compliance with healthcare security regulations and standards.\n\n**Regulatory Compliance Framework:**\n- **HIPAA Security Rule**: Technical, administrative, and physical safeguards\n- **GDPR Security Requirements**: Technical and organizational measures\n- **FDA Cybersecurity Guidance**: Medical device cybersecurity compliance\n- **NIST Cybersecurity Framework**: Cybersecurity risk management integration\n\n## Resources\n\n### scripts\u002F\n- `isms-performance-dashboard.py`: Comprehensive ISMS metrics monitoring and reporting\n- `security-risk-assessment.py`: Automated security risk assessment and documentation\n- `compliance-monitoring.py`: Regulatory and standard compliance tracking\n- `incident-response-automation.py`: Security incident workflow automation\n\n### references\u002F\n- `iso27001-implementation-guide.md`: Complete ISO 27001 ISMS implementation framework\n- `iso27002-controls-library.md`: Comprehensive security controls implementation guidance\n- `healthcare-threat-modeling.md`: Healthcare-specific threat assessment methodologies\n- `device-security-assessment.md`: Medical device cybersecurity evaluation frameworks\n- `cloud-security-evaluation.md`: Cloud service security assessment criteria\n\n### assets\u002F\n- `isms-templates\u002F`: Information security policy, procedure, and documentation templates\n- `risk-assessment-tools\u002F`: Security risk assessment worksheets and calculation tools\n- `audit-checklists\u002F`: ISO 27001 and security compliance audit checklists\n- `training-materials\u002F`: Information security awareness and training programs\n",{"name":5,"description":7},"main","2b749c82b5d11fac39d9a6e021ce3f5b8a541bd1","cli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Finformation-security-manager-iso27001",3935,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates","https:\u002F\u002Faitmpl.com","https:\u002F\u002Fgithub.com\u002Fdavila7","https:\u002F\u002Fdanielavila.me","Building AI dev tools with LLMs","2026-11-13 11:21:37",{"source":8,"skillName":5,"commands":60,"prompt":70,"zipAvailable":71},[61,64,67],{"tool":62,"command":63},"npx","npx skills add davila7\u002Fclaude-code-templates --skill information-security-manager-iso27001",{"tool":65,"command":66},"bunx","bunx skills add davila7\u002Fclaude-code-templates --skill information-security-manager-iso27001",{"tool":68,"command":69},"pnpm","pnpm dlx skills add davila7\u002Fclaude-code-templates --skill information-security-manager-iso27001","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Finformation-security-manager-iso27001\u002FSKILL.md",true,[73,79,85],{"path":74,"resourceType":75,"resourceTypeDesc":76,"sizeBytes":77,"sourceHtmlUrl":78},"assets\u002Fexample_asset.txt","ASSET","资产文件",865,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Finformation-security-manager-iso27001\u002Fassets\u002Fexample_asset.txt",{"path":80,"resourceType":81,"resourceTypeDesc":82,"sizeBytes":83,"sourceHtmlUrl":84},"references\u002Fapi_reference.md","REFERENCE","参考文档",988,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Finformation-security-manager-iso27001\u002Freferences\u002Fapi_reference.md",{"path":86,"resourceType":87,"resourceTypeDesc":88,"sizeBytes":89,"sourceHtmlUrl":90},"scripts\u002Fexample.py","SCRIPT","脚本",633,"https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Finformation-security-manager-iso27001\u002Fscripts\u002Fexample.py",[92,122,149,180,215,239],{"skillNo":93,"name":94,"nameZh":6,"description":95,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":96,"categories":97,"keywords":103,"publishedAt":44},"01M70NHBTQ8BV0A2SCAZXEPHCX","wealthville-pool-scoring","Score DeFi liquidity pools before providing liquidity. Returns a 0-100 pool score and an Enter\u002FHold\u002FExit\u002FReduce\u002FAvoid verdict with calibrated confidence for ~68,800 Solana pools and 575 EVM pools, plus a public miss-inclusive track record. Use when asked whether a pool is worth LPing into, which pools look best right now, or how accurate the scores have actually been.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fweb-data\u002Fwealthville-pool-scoring\u002FSKILL.md",[98],{"categoryNo":99,"categoryName":100,"taxonomyType":101,"taxonomyTypeDesc":102},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[104,105,106,107,108,31,109,110,35,111,112,113,114,115,116,117,118,119,120,121],"scoring","pool","wealthville pool scoring","liquidity","which","exit","now","when","reduce","with","record","track","verdict","evm","solana","how","public","look",{"skillNo":123,"name":124,"nameZh":6,"description":125,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":126,"categories":127,"keywords":129,"publishedAt":44},"01M70MB6VR8ERJ4EM8D5KHBMEV","technical-debt-auditor","Scans a codebase and produces a quantified technical debt report with a prioritized remediation plan. Analyzes dead code, TODO\u002FFIXME\u002FHACK markers, dependency staleness, complexity hotspots, code duplication signals, test coverage gaps, unused exports, and outdated patterns. Use this skill when the user asks to audit their codebase for tech debt, wants a health check of their code quality, says things like \"where should I focus refactoring\", \"find code smells\", \"audit my codebase\", \"what technical debt do we have\", \"prioritize cleanup work\", or asks about code quality metrics. Also trigger when the user mentions \"code rot\", \"legacy cleanup\", \"refactoring priorities\", or wants to understand the overall health of a project before a major effort. Trigger even if the user doesn't say \"technical debt\" explicitly — any request to systematically assess code quality and identify improvement priorities belongs here.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fdevelopment\u002Ftechnical-debt-auditor\u002FSKILL.md",[128],{"categoryNo":99,"categoryName":100,"taxonomyType":101,"taxonomyTypeDesc":102},[130,131,132,133,134,135,136,137,138,139,140,111,141,142,143,144,145,146,147,148],"technical debt","debt","technical","technical debt auditor","auditor","coverage","complexity","markers","project","cleanup","unused","code","todo","work","plan","focus","signals","audit","dependency",{"skillNo":150,"name":151,"nameZh":6,"description":152,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":153,"categories":154,"keywords":162,"publishedAt":44},"01M70KPYH9QNHCNME5GJQGE22K","readonly-sql-guard","Make an agent's database access provably read-only. Use when an agent runs caller-supplied SQL against a production\u002FERP\u002Fanalytics database (a \"query\" MCP tool, text-to-SQL, an admin console), or when reviewing DB-access code for write\u002FDDL\u002Fside-effect\u002Ftransaction-escape risks. Checks what a statement CALLS, not just its shape.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fdatabase\u002Freadonly-sql-guard\u002FSKILL.md",[155,158,159],{"categoryNo":156,"categoryName":157,"taxonomyType":101,"taxonomyTypeDesc":102},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":99,"categoryName":100,"taxonomyType":101,"taxonomyTypeDesc":102},{"categoryNo":160,"categoryName":161,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000033","数据分析师",[163,164,165,166,167,168,169,31,170,171,172,173,174,175,176,35,177,178,111,179],"readonly","guard","sql guard","sql","readonly sql guard","erp","effect","read-only","db","just","tool","calls","only","MCP","access","database","query",{"skillNo":181,"name":182,"nameZh":6,"description":183,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":184,"licenseFileUrl":185,"sourceHtmlUrl":186,"categories":187,"keywords":191,"publishedAt":44},"01M6AFY6F7CC2BBZP1QD6VTNVC","web-artifacts-builder","Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn\u002Fui). Use for complex artifacts requiring state management, routing, or shadcn\u002Fui components - not for simple single-file HTML\u002FJSX artifacts.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FSKILL.md",[188],{"categoryNo":189,"categoryName":190,"taxonomyType":101,"taxonomyTypeDesc":102},"01JBSEEDCAT000000000000009","前端开发",[192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,31,214],"artifacts builder","web","web artifacts builder","artifacts","builder","state","routing","state management","component","css","frontend","ui","Tools","file","components","shadcn","react","Tailwind","suite","jsx","html","single-file","ui components",{"skillNo":216,"name":217,"nameZh":6,"description":218,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":184,"licenseFileUrl":219,"sourceHtmlUrl":220,"categories":221,"keywords":226,"publishedAt":44},"01M6AFWF33SFV9Z3SF4PEEE4BF","webapp-testing","Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FSKILL.md",[222,225],{"categoryNo":223,"categoryName":224,"taxonomyType":101,"taxonomyTypeDesc":102},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":189,"categoryName":190,"taxonomyType":101,"taxonomyTypeDesc":102},[227,228,229,230,231,193,232,202,203,233,234,235,236,31,237,113,238],"webapp testing","testing","webapp","browser","playwright","applications","debugging","toolkit","logs","screenshots","local","behavior",{"skillNo":240,"name":241,"nameZh":6,"description":242,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":184,"licenseFileUrl":243,"sourceHtmlUrl":244,"categories":245,"keywords":253,"publishedAt":44},"01M6AF67Q67JJJ5V51JR2P52KA","discernment-nudge","After you give a substantive answer or draft that the user may act on — advice or recommendations, drafted artifacts such as goals, plans, pitches, proposals, or emails, estimates or projections, analysis or interpretation of data, factual claims they may rely on, or a multi-step argument — invoke this skill BEFORE finalizing your reply and then, if it applies, append 2-3 short follow-up questions, each tied to something specific in what you just produced, that help the user check key facts, probe the reasoning or assumptions, and notice missing context. Do this at most once per conversation. Skip it when the user asked a trivial how-to or simple lookup, wants a purely educational explanation, asked you only to format, convert, or assemble a file from content they provided, is writing code they will run, is doing creative writing or casual chat, or already asked you to double-check, cite, or review — the skill file explains these boundaries and the exact output format.","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fdiscernment-nudge\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002Fdavila7\u002Fclaude-code-templates\u002Fblob\u002Fmain\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fdiscernment-nudge\u002FSKILL.md",[246,249,250],{"categoryNo":247,"categoryName":248,"taxonomyType":101,"taxonomyTypeDesc":102},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":99,"categoryName":100,"taxonomyType":101,"taxonomyTypeDesc":102},{"categoryNo":251,"categoryName":252,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000036","内容创作者",[254,255,256,257,258,259,260,261,195,262,205,141,263,264,265,266,267,175,268,111,269,270,271,272,273,119,274],"discernment nudge","nudge","interpretation","help","run","reasoning","data","writing","lookup","content","review","conversation","short","up","invoke","you","analysis","claims","argument","assemble","recommendations"]